Submission Under 37 CFR §1.114 
U.S. Serial No.: 10/036,333 
Attorney Docket No.: EMCO 1 -4 1 (00024) 

IN THE CLAIMS 

Please amend the claims as follows: 

1 . (Currently Amended) In a computer system, a method for e stab li sh i ng a pack e t 
commun i cat i ons s e ss i on to a data storag e syst e m, th e m e thod comprising th e st e ps of : 

receiving , from a data storage system, a request to establish a communications 
session with a-the data storage system , the request including user authentication 
information needed to establish the communications session : 

establishing a first I nt e rn e t Protoco l (IP) d i g i ta l packet communications session 
from the computer system to a data communications device capable of communicating 
with the data storage system; , th e e stab li shing a f i rst pack e t commun i cat i ons sess i on 
compr i s i ng: 

obta i n i ng conn e ct i on i nformation for a data commun i cat i ons d e v i c e that i s 
capab l e of commun i cat i ng w i th the data storage system; 

i n i t i at i ng tho f i rst packet communicat i ons sess i on from tho computer 

syst e m to a data commun i cat i ons d e v i c e us i ng th e conn e ct i on i nformat i on for th e data 
commun i cat i ons d e v i c e ; 

prov i d i ng, to th e data commun i cat i ons d e v i c e , f i rst pack e t commun i cat i ons 

s e ss i on auth e nt i cat i on i nformat i on such that th e data commun i cat i ons d e v i c e can 
d e t e rm i n e i f a us e r of th e comput e r syst e m i s author i z e d to e stab li sh th e f i rst pack e t 
commun i cat i ons s e ss i on; and 

wh e n th e us e r of th e comput e r syst e m i s author i z e d to e stab li sh th e f i rst 

packet commun i cat i ons sess i on, a ll ow i ng tho computer system to perform tho stop of 
establishing a second packet communications session from the data communications 
device to a service processor associated with the data storage system; th e data storag e 
syst e m and performing packet communications between the computer system and the 
service processor associated with the data storage system using the first and second 
packet communications sessions ; and 

i f th e us e r of th e comput e r syst e m i s not a uthor i z e d to e stab li sh th e f i rst 

pack e t commun i cat i ons s e ss i on, d e ny i ng th e ab ili ty of th e comput e r syst e m to p e rform 
tho stop of estab li sh i ng a second packet communicat i ons sess i on from tho data 
commun i cat i ons dev i ce to tho data storage systom . 
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2. (Original) The method of claim 1 wherein the step of receiving a request to establish 
a communications session with a data storage system comprises the steps of: 

receiving user authentication information for a user of the computer system; 
authenticating an identity of the user based on the user authentication 
information; 

receiving a data storage system identity indicating an identity of the data storage 
system to which the packet communications session is to be established. 

3. (Previously Presented) The method of claim 2 wherein: 

the request to establish a communications session with a data storage system 
includes the identity of the data storage system to which a communications session is to 
be established; and 

wherein the identity specifies at least one of; 

i) a phone number of a service processor modem associated with the data 
storage system; 

ii) a serial number of the data storage system; and 

iii) customer information related to a customer operating the data storage 
system. 

4. (Previously Presented) The method of claim 2 wherein the step of receiving data 
storage system identity information comprises the steps of: 

receiving data storage system search criteria; 

providing data storage system search criteria to a connection monitor computer 
system to produce a set of data storage system identities that meet the data storage 
system search criteria; and 

receiving the set of data storage system identities that meet the data storage 
system search criteria; and 

allowing the user to select at least one data storage system identity from the set 
of data storage system identities. 
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5. (Original) The method of claim 4 wherein: 

the data storage system search criteria is received from at least one of: 

i) a user of the computer system; 

ii) a service ticket identifying a data storage system; 

the data storage system search criteria includes at least a portion of the user 
authentication information; and 

the set of data storage system identities that meet the data storage system 
search criteria includes identities of data storage systems to which a user identified by 
the portion of the user authentication information is allowed to establish a packet 
communications session. 

6. (Canceled) 

7. (Currently Amended) The method of claim 1 wherein the stop of establishing a first 
packet communications session comprises: 

obtaining connection information for the data communications device compr i s e s 
th e st e ps o f . wherein the obtaining comprises : 

initiating the first packet communications session from the computer 
system to the data communications using the connection information for the data 
communications device; 

providing, to the data communications device, the user authentication 

information such that the data communication device can determine if a user of the 
computer system is authorized to establish the first packet communications session; 
and 

providing, to a connection monitor computer system, a request for an 
address of a data communications device, the request including data communications 
device selection criteria allowing the connection monitor computer system to select and 
return an address of an available data communications device that is authorized to 
establish the second packet communications session to the data storage system; and 

receiving the address of the data communications device selected by the 
connection monitor computer system. 
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8. (Original) The method of claim 7 wherein the request for an address of the data 
communications device includes at least one of: 

i) a portion of the user authentication information; 

ii) customer information concerning a customer operating the data storage 
system; and 

iii) connection information associated with the data storage system; and 
wherein the connection monitor computer system compares the request for an 

address against user and customer data to determine what data storage systems a user 
providing the request is allowed to access. 

9. (Previously Presented) The method of claim 1 wherein: 

the step of initiating the first packet communications session establishes an 
internet protocol communications session between the computer system and the data 
communications device; and 

wherein the step of providing, to the data communications device, first packet 
communications session authentication information passes user authentication 
information from the computer system to the data communications device to allow the 
data communications device to authorize the internet protocol communications session. 

10. (Previously Presented) The method of claim 9 wherein the step of providing, to the 
data communications device, first packet communications session authentication 
information causes the data communications device to communicate with a user 
account computer system to verify if the user of the computer system identified in the 
user authentication information is authorized to cause the data communications device 
to establish the first and second packet communications sessions from the computer 
system, through the data communications device, to the data storage system. 

1 1 . (Original) method of claim 1 wherein the step of establishing a second packet 
communications session from the data communications device to the data storage 
system comprises the steps of: 



5 



Submission Under 37 CFR §1.114 
U.S. Serial No.: 10/036,333 
Attorney Docket No.: EMCO 1-4 1(00024) 



providing, to the data communications device, second packet communications 
session connection information allowing the data communications device to initiate the 
second packet communications session from the data communications device to the 
data storage system; 

receiving second packet communications session state information indicating a 
state of the second packet communication session between the data communications 
device and the data storage system. 

12. (Previously Presented) The method of claim 11 wherein: 

the second packet communications session connection information includes data 

storage system connection information associated with the data storage system and 

user authentication information of the user of the computer system; and 

wherein the step of providing the second packet communications session 

connection information to the data communications device causes the data 

communications device to perform the steps of: 

initiating the second packet communications session from the data 
communications device to the data storage system using the data storage 
system connection information; 

providing the user authentication information to a remote access server 
associated with the data storage system to allow the remote access server to 
authorize the establishment of the second packet communications session from 
the data communications device to the data storage system; 

receiving data storage system address information at the data 
communications device identifying an address of the data storage system to 
allow the data communications device to establish the second packet 
communications session; and 

forwarding second packet communications session state information to 
the computer system from the data communications device to allow the computer 
system to perform packet communications with the computer system and data 
storage system using the first and second packet communications sessions. 
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13. (Original) The method of claim 12 wherein the data storage system address 
information is a pre-configured network address assigned to the service processor 
associated with the data storage system. 

14. (Previously Presented) The method of claim 12 wherein: 

the second packet communications session connection information includes data 
storage system connection information including a phone number of a service processor 
modem associated with the service processor associated with the data storage system; 
and 

wherein the step of initiating the second packet communications session from the 
data communications device to the data storage system causes the data 
communications device to instruct a modem to dial the phone number of a service 
processor modem in order to establish a dial up connection to the data storage system 
from the data communications device. 

15. (Original) The method of claim 12 wherein: 

the second packet communications session state information includes the data 
storage system address information and includes data storage system connection 
bandwidth information; and 

wherein the step of forwarding second packet communications session state 
information to the computer system from the data communications device causes the 
data communications device to perform the step of: 

forwarding the second packet communications session state information to a 
network manager computer system which receives the second packet communications 
session state information and forwards routing information to the computer system so 
that the computer system can perform packet communications with the data storage 
system. 

16. (Previously Presented) The method of claim 12 wherein the step of performing 
packet communications between the computer system and the service processor 
associated with the data storage system comprises the steps of: 
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receiving the second packet communications session state information in 
response to the step of forwarding second packet communication session state 
information to the computer system from the data communication device; 

adjusting connection bandwidth associated with the first packet communications 
session to match connection bandwidth associated with the second packet 
communications session; 

providing computer system address information to the data storage system so 
that the data storage system can establish a route to the computer system; and 

using the first packet communications session between the computer system and 
the data communications device and the second packet communications session 
between the data communications device and the service processor associated with the 
data storage system to perform packet communications between the computer system 
and the service processor associated with the data storage system. 

17. (Original) The method of claim 1 wherein the step of receiving a request to initiate a 
communications session with the data storage system further comprises the steps of: 

receiving a service ticket from the data storage system; and 
analyzing the service ticket to determine an identity of the data storage system to 
which a packet communications session is to be established from the computer system. 

18. (Original) The method of claim 1 wherein the steps of establishing a first packet 
communications session, establishing a second packet communications session and 
performing packet communications are performed using secure and authenticated 
communications sessions. 

19. (Currently Amended) In a processor in a data storage system, a method for 
establishing a packet communications session with a computer system, the method 
comprising the steps of: 

sending, to the computer system, a request to establish a communications 
session with the data storage system, the request including user authentication 
information needed to establish the communications session; 
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receiving a request to initiate a packet communications session, the request to 
initiate a packet communications session including the user authentication information 
of a us e r of th e comput e r syst e m ; 

providing data storage system address information to an initiator of the request; 

receiving computer system address information to allow-the a_processor in the 
data storage system to perform packet communications with the computer system; and 

establishing a n I ntornot Protoco l ( I P) d i g i ta l packet communications session with 
the computer system based on the computer system address information^and 

auth e nt i cat i ng an i d e nt i ty of th e us e r bas e d on th e us e r auth e nt i cat i on 
i nformat i on i n ord e r to author i z e th e e stab l ishment of th e pack e t commun i cat i ons 
s e ss i on to th e data storag e syst e m . 

20. (Canceled) 

21 . (Currently Amended) The method of claim 1 9, further comprising tho otopo of : 

i n r e spons e to th e st e p of auth e nt i cat i ng an i d e nt i ty of th e us e r, th e proc e ssor 
e stab li sh e s a pack e t commun i cat i ons s e ssion w i th a data commun i cat i ons d e v i c e from 
wh i ch th e r e qu e st to i n i t i at e a pack e t communicat i ons s e ss i on or i g i nat e s authorizing, 
based on the user authentication information, the establishment of the packet 
communications session with the computer system . 

22. (Previously Presented) The method of claim 21 wherein the processor is a service 
processor in the data storage system and the data storage system address information 
is a pre-configured network address assigned to the service processor associated with 
the data storage system by a vendor of the data storage system. 

23. (Original) The method of claim 19 wherein: 

the request to initiate a packet communications session is sent from a data 
communications device interconnected with the computer system; and 

wherein the step of providing data storage system address information provides 
a network address of the processor in the data storage system to the data 
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communications device for receipt by the computer system to allow the computer 
system to perform packet communications to the data storage system. 

24. (Original) The method of claim 1 9 wherein the step of establishing a packet 
communications session with the computer system establishes route information within 
the data storage system based on the computer system address information to allow 
the processor to perform packet communications with the computer system. 

25-46. (Canceled) 

47. (Currently Amended) A computer program product having a computer-readable 
medium including computer program logic instructions encoded thereon that when 
performed i n a comput e r syst e m, caus e s th e comput e r syst e m to e stab li sh a pack e t 
commun i cat i ons sess i ons to a data storage system, and whoro i n when the computer 
program l og i c i s performed on a computer processor in4he a_computer system, the 
comput e r program l og i c causes the processor to perform the operations of: 

receiving , from a data storage system, a request to establish a communications 
session with-a the data storage system , the request including user authentication 
information needed to establish the communications session ; 

establishing a first I nt e rn e t Protoco l (IP) d i g i ta l packet communications session 
from the computer system to a data communications device capable of communicating 
with the data storage system; 

establishing a second packet communications session from the data 
communications device to a service processor associated with the data storage system; 
and 

performing packet communications between the computer system and the 
service processor associated with the data storage system using the first and second 
packet communications sessions^ 

r e c ei v i ng us e r auth e nt i cat i on i nformation for a us e r of th e comput e r syst e m; 

auth e nt i cat i ng an i d e nt i ty of th e us e r bas e d on th e us e r auth e nt i cat i on 

i nformat i on; and 
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r e c ei v i ng a data storag e syst e m i d e nt i ty ind i cat i ng an i d e nt i ty of th e data storag e 

syst e m to wh i ch th e pack e t commun i cations s e ss i on i s to b e e stab li sh e d . 

48. (Canceled) 

49. (Currently Amended) The computer program product of claim 47 wherein the 
computer program logic that, when performed on tho processor, causes tho processor 
to p e rform th e op e rat i on of e stab li sh i ng a f i rst pack e t commun i cat i ons s e ss i on from th e 
comput e r syst e m to a data commun i cat i ons d e v i c e capab le of commun i cat i ng w i th th e 
data storag e syst e m, further includes instructions that, when performed on the 
processor, cause the processor to perform the operations of: 

obtaining connection information for-a the data communications device that is 
capable of communicating with the data storage system; 

initiating the first packet communications session from the computer system to-a 
the data communications device using the connection information for the data 
communications device; 

providing, to the data communications device, first pack e t commun i cat i ons 
s e ss i on the user authentication information such that the data communications device 
can determine if a user of the computer system is authorized to establish the first packet 
communications session; and 

if the user of the computer system is authorized to establish the first 
packet f i rst pack e t communications session, allowing the computer system to perform 
the step of establishing a second packet communications session from the data 
communications device to the data storage system; and 

if the user of the computer system is not authorized to establish the first 
packet first packet communications session, denying the ability of the computer system 
to perform the step of establishing a second packet communications session from the 
data communications device to the data storage system. 

50. (Currently Amended) The computer program product of claim 47 wherein the 
computer program logic that, when performed on tho processor, causes tho processor 
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to p e rform th e op e rat i on of e stab li sh i ng a s e cond pack e t commun i cat i ons s e ss i on from 
th e data commun i cat i ons d e v i c e to th e data storage syst e m further includes instructions 
that, when performed on the processor, cause the processor to perform the operations 
of: 

providing, to the data communications device, second packet communications 
session connection information allowing the data communications device to initiate the 
second packet communications session from the data communications device to the 
data storage system; and 

receiving second packet communications session state information indicating a 
state of the second packet communication session between the data communications 
device and the data storage system. 

51 . (Original) The computer program product of claim 50 wherein the data storage 
system address information is a pre-configured network address assigned to the service 
processor associated with the data storage system. 

52. (Currently Amended) The computer program product of claim 47 wherein the 
computer program logic that , wh e n p e rform e d on th e proc e ssor, caus e s th e proc e ssor 
to p e rform pack e t commun i cat i ons w i th th e data storag e syst e m further includes 
instructions that, when performed on the processor, cause the processor to perform the 
operations of: 

receiving the second packet communications session state information in 
response to the step of forwarding second packet communication session state 
information to the computer system from the data communication device; 

adjusting connection bandwidth associated with the first packet communications 
session to match connection bandwidth associated with the second packet 
communications session; 

providing computer system address information to the data storage system so 
that the data storage system can establish a route to the computer system; and 

using the first packet communications session between the computer system and 
the data communications device and the second packet communications session 
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between the data communications device and the data storage system to perform 
packet communications between the computer system and the data storage system. 

53. (Currently Amended) A computer program product having a computer-readable 
medium including computer program logic encoded thereon that when performed 4n-a 
data storage system, causes the data storage system to estab li sh a packet 
commun i cat i on sess i on to a computer system, and where i n when the computer 
program l og i c i s p e rform e d on a computer processor in-the a_data storage system, the 
computer program logic causes the processor to perform the operations of: 

sending, to a computer system, a request to establish a communications session 
with the data storage system, the request including user authentication information 
needed to establish the communications session; 

receiving a request to initiate a packet communications session, the request to 
initiate a packet communications session i nc l udes including the user authentication 
information of a usor of tho computer system ; 

providing data storage system address information to-toean initiator of the 
request; 

receiving computer system address information to allow-the a_processor in the 
data storage system to perform packet communications with the computer system; and 

establishing a n I nt e rn e t Protoco l ( I P) dig i ta l packet communications session with 
the computer system based on the computer system address information-Hafid 

auth e nt i cat i ng an i d e nt i ty of th e us e r bas e d on th e us e r auth e nt i cat i on 
i nformat i on i n order to author i ze tho establishment of tho packet commun i cat i ons 
sess i on to tho data storage system . 

54. (Canceled) 

55. (Previously Presented) The computer program product of claim 53 wherein the 
processor is a service processor in the data storage system and the data storage 
system address information is a pre-configured network address assigned to the service 
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processor associated with the data storage system by a vendor of the data storage 
system. 

56-58. (Canceled) 

59. (Previously Presented) The method of claim 18 further comprising activating a 
security client on said service processor to block out TCP data packets that have not 
been encrypted by a predetermined gateway server. 

60-63. (Canceled) 

64. (Previously Presented) The method of claim 1 wherein said data storage system 
comprises a plurality of data storage devices which collectively operate under the 
control of at least one software driven microprocessor to access data in accordance 
with data access requests. 

65. (Canceled) 

66. (Previously Presented) The computer program product of claim 47 wherein said 
data storage system comprises a plurality of data storage devices which collectively 
operate under the control of at least one software driven microprocessor to access data 
in accordance with data access requests. 
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